[RTT] ParcelableRttResults parcel code fix

ParcelableRttResults was unparceled incorrectly. Bug: 70398564 Test: exploit provided in bug no longer works Change-Id: Ifd6de547e9861bbebc399b43d0cc2899a8160813 (cherry picked from commit e1e5a24)
lin15-microG · Feb 8, 2018 · 5a3d270 · 5a3d270
1 parent 09ba8fd
commit 5a3d270
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/wifi/java/android/net/wifi/RttManager.java b/wifi/java/android/net/wifi/RttManager.java
@@ -847,8 +847,8 @@ public void writeToParcel(Parcel dest, int flags) {
                     }
                     dest.writeByte(result.LCR.id);
                     if (result.LCR.id != (byte) 0xFF) {
-                        dest.writeInt((byte) result.LCR.data.length);
-                        dest.writeByte(result.LCR.id);
+                        dest.writeByte((byte) result.LCR.data.length);
+                        dest.writeByteArray(result.LCR.data);
                     }
                     dest.writeByte(result.secure ? (byte) 1 : 0);
                 }